Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4aac0821-327b-36c3-b41e-1bb8c86d12dc.roa
File: 4aac0821-327b-36c3-b41e-1bb8c86d12dc.roa (raw, json)
Hash identifier: cR0NPAl/q+a39sdooRaNxY5IJCzqhM2WEngcgaclW5Y=
Subject key identifier: F4:F4:F5:30:F8:EB:91:D1:44:C2:F7:92:2E:DD:83:5D:8C:FC:8C:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584024AFEB2C1A7DFD3DC389357C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4aac0821-327b-36c3-b41e-1bb8c86d12dc.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.19.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:af:eb:2c:1a:7d:fd:3d:c3:89:35:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=b1679b95-36c7-4d9f-b79e-212fba658b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:58:07:58:6b:5b:b9:40:10:a9:fc:9a:aa:
6d:c8:b0:ba:82:10:98:5c:75:65:e1:84:19:24:07:
ab:8e:d0:90:9d:46:5e:d2:74:02:b1:56:79:e8:0d:
6a:5c:ed:1a:d7:df:97:b7:4e:bf:e1:7c:07:4b:30:
0c:6f:7e:5b:7e:9d:a2:74:4b:4b:4a:67:fb:cb:77:
48:09:f3:7d:cc:87:83:e2:68:e0:0f:4f:78:e2:71:
f3:86:4f:f4:89:b0:1d:d6:c9:62:f0:24:9a:c7:be:
9a:27:c0:65:c9:1d:b1:a9:c6:a6:bd:32:a1:f3:f7:
1d:23:8e:6b:9c:23:6d:3d:55:db:18:ce:a1:34:42:
9c:23:fd:37:06:5c:a7:41:c4:3a:0b:c4:38:39:05:
53:08:44:9b:89:6b:82:a0:a0:cc:66:d4:ec:04:58:
db:a8:2d:49:20:28:08:72:ec:e0:9a:8f:fb:02:c1:
63:09:02:2c:53:55:e0:9f:d9:0e:2f:80:88:e5:86:
b7:dc:4d:d1:e0:f8:24:ae:36:a5:33:d6:1b:d2:bd:
18:c3:8d:39:80:8f:46:1b:a1:a9:9e:ab:c8:77:18:
b2:58:3f:2a:d2:1b:1a:ab:e9:d2:fc:29:ec:e1:ef:
27:27:a4:58:af:20:75:d1:0d:58:f5:2b:fa:23:53:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F4:F5:30:F8:EB:91:D1:44:C2:F7:92:2E:DD:83:5D:8C:FC:8C:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4aac0821-327b-36c3-b41e-1bb8c86d12dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.19.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:55:49:7e:6d:b0:0c:1d:c2:11:b7:4a:91:8e:c0:dc:e8:67:
ba:30:e5:88:37:e3:65:45:31:98:90:23:5b:f6:63:06:19:17:
e7:06:aa:0c:c1:98:ce:aa:6c:2d:74:55:a1:82:c7:2f:d5:58:
e8:a5:05:80:bb:d6:22:ec:25:17:55:1a:a2:a4:7a:71:62:be:
08:15:41:a3:37:17:cb:4e:ee:97:be:a9:85:9e:dc:ba:4d:8c:
54:5b:ed:c0:c4:80:c1:d5:95:7c:7a:9d:17:a0:69:57:18:5a:
e9:ce:bd:70:b4:be:70:c0:a3:e7:a4:f0:b3:6d:46:91:c0:de:
b3:3d:ab:ec:94:3f:c5:09:c7:fe:3a:47:e8:0d:86:17:ee:c7:
28:b3:fa:ec:f9:41:9f:38:8d:a5:ec:dd:80:4e:fd:5c:5b:92:
17:f1:9f:62:62:06:f8:5f:ae:ad:2d:30:40:85:d3:44:39:4f:
3f:f8:b0:ec:b7:5f:bb:cb:9e:c6:3d:39:21:f0:41:ed:a8:04:
c0:99:b4:c2:72:71:b5:ca:55:39:9e:9c:6f:08:81:d0:3b:f6:
ec:47:ce:a2:ee:13:5f:5e:59:99:f8:c5:78:f6:2d:da:30:cc:
b5:64:65:d5:04:97:28:14:a4:dc:cc:c3:4f:4c:9d:55:4f:a7:
9b:42:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:05 2025 by rpki-client